fj_
d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m
Z
m Z ddl m
Z
ddlmZ ddlmZmZ ddlmZmZ ddlmZ dd lmZ dd
lm Z m Z m Z m Z m Z dd l!m"Z"m#Z#m$Z$ dd l%m&Z& ej' d
Z( ej) d Z*dZ+dZ, ej- e. Z/ e
Z0dZ1de
e2e2f fdZ3de2de4fdZ5de2de2fdZ6de7de4dede
e2e2f fdZ8d d Z9d d Z:dS )!z@
This module contains X-Ray User Manager service implementation
N)Lockcurrent_thread)Tuple)BoundedThreadExecutor)
get_runnerRunner)user_agent_sockuser_agent_log) XRayError)gettext)unpack_request
pack_response
extract_credscheck_for_rooterror_response)
create_socket read_sys_idconfigure_logging)get_locale_from_envars
user_agentz0^[a-zA-Z]{1,5}(_[a-zA-Z]{2})?(\.[a-zA-Z0-9-]+)?$2 i returnc f t d } t | dfS )zN
General format of message in case of errors during manager execution
z[X-Ray User Plugin failed to execute your request. Please, contact your server administrator )_r encode)_errs F/opt/cloudlinux/venv/lib64/python3.11/site-packages/xray/user_agent.pygeneral_exec_errorr / s1
j k kD $ & & ( (# --r orig_msgc R t j dd| S )zL
Cut data field from the original message, because it could be huge
z (?<="data": {).+(?=}, "result")z...)resubdecode)r! s r log_truncater& 7 s# 63UHOO.genC s7 V
wwqzz / / /*$ $ r s (?<="warning": ").+(?="}))r# r$ )r! r- s r duplicate_warning_castr. > s(
6.X > >>r commanduserrunnerc
j dk r1 t | d< n # t $ r t cY S w xY wfdd
d}d}||g| | }| |t }t
|t rt | st pd}|r0 | }dj
d | || d
g}n dj
| d
g}|
fd |
D ||d } t d
|t | t! j |d| d }
n6# t$ t& t( t j f$ r t cY S w xY w|
j |
j } } | r:t dt3 j t5 | | r?t dt3 j | t9 | | fS )zA
Trigger runner.target utility with requested parameters
manager system_idc F | j v r j | | n| S )z0runner may define a special cast for each option) option_cast)optr1 s r runner_cast_optz(execute_manager..runner_cast_opt] s< 6--- 'v!#& 36 7r c | du rdnd| S )z=Hide True value from cmd representation for bool-flag optionsT = )vs r
hide_true_valz&execute_manager..hide_true_valb s $YYrrGGG+r api_versionlangzC.UTF-8z
/usr/sbin/--r/ c T g | ]$\ }}|r |v d | | %S )rA r< ).0kr= r> r8 skip_optionss r
z#execute_manager..z s^ @ @ @1#$@)*,)>)> <__Q''; q)9)9;;)>)>)>r ) XRAYEXEC_UIDLANGz*Going to execute: %s, with environment: %sTx )capture_outputenvtimeoutz [%s] Proxied command stdout: %sz [%s] Proxied command stderr: %s) namer r r getr
isinstancestr
_LOCALE_REmatchtargetpopextenditemsloggerinfo
subprocessrunOSError
ValueError TypeErrorSubprocessErrorstdoutstripstderrr r& r% r. )r/ r0 r1 api_version_key
locale_optionr?
target_localecasted_api_versioncmdwith_envpbyte_outbyte_errr> r8 rE s ` @@@r execute_managerrk S s {i (#.==GK ( ( (%'' ' ' ' (7 7 7 7 7
, , , $OM $]3L++o..K KK
/E/G/GHHM mS ) ) >1A1A-1P1P >.00=I
E ,__ = =+FM++-F2D-F-F U\U`U`ajUkUkl+FM++W[[-C-CD JJ @ @ @ @ @ @
@ @ @ A A A !%m<>+;+;hH , 5~7G7G7L ** , , , ' 5~7G7G7L OO%% ' ' ' !( + +X 55s # >><F 0GG
connection
socket objectc
t j dt d id }| 5 | d t | \ }}}t | rB| t | ddd dS t 5 t |d t k r4t d| ddd ddd dS t |xx d z
cc< ddd n # 1 swxY w Y | d
}|rt! | d
k r[ t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS t# j d | d }|dk s |t& k r[ t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS d }t! | |k r| |t! | z
}|s[ t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS ||z
}t! | |k t) | } n# t j t, f$ r}
| t t j dt/ |
id Y d}
~
t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS d}
~
ww xY w t1 | d
} n# t4 $ r}
| t t/ |
Y d}
~
t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS d}
~
ww xY w | | n# t8 $ r}
| t t/ |
Y d}
~
t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS d}
~
ww xY wt; | t/ | | \ } }
| t | p|
nu# t< t> j f$ r\ Y t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y ddd dS w xY w t 5 t |xx d z cc< t | dk rt |= ddd n # 1 swxY w Y nR# t 5 t |xx d z cc< t | dk rt |= ddd w # 1 swxY w Y w xY wddd dS # 1 swxY w Y dS )z
Handle incoming connection
:param connection: socket object usable to
send and receive data on the connection
resultz#Commands from root are not acceptedF) ensure_asciig @Nr z6Too many concurrent connections from uid=%s, rejecting z>Ir r1 )!jsondumpsr
settimeoutr r sendallr r _uid_connections_lock_uid_connectionsrN _MAX_CONNECTIONS_PER_UIDrW warningrecvlenstructunpack_MAX_REQUEST_SIZEr
JSONDecodeErrorUnicodeDecodeErrorrP r rT r validator
SystemExitrk r[ socketrL )rl
root_error_pid_uid_gid
raw_msglenmsglendatachunkargser1 _outr s r handler s
!9:: J
8/ 8/ c"""(44dD $ }Z->->-@-@ A A B B B 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ # ( ( ##D!,,0HHH WY]^^^ ( ( ( ( ( (8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/
T " " "a ' " " " ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( + /# ++J
Z 1!4!4J '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/$ ]444Q7F{{f'8 8 8B '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/, Dd))f$$"T(:;; 6 '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/6
d))f$$
%d++(*<=
""=J#a&& 1FFFMMOO$Q $Q R R R& '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/>
#DHHX$6$677
""=Q #A#ABBB '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/L
&&&&
""=Q #A#ABBB '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/X
)s4yy&AAJD$ }T\T : : ; ; ; ; ( &
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/d
< '
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/&
/
/ &&&!+&&&#D)Q..(.
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/k8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/ 8/s A-["[)AD#* [D# [#D' '[*D' +[/*V1[!/F [ F [#F $[4,V1![(/H# [#H' '[*H' +[; >[J> [V1+K;:V1;O AO(V1,[3/N." [.N2 2[5N2 6[O V1"O21V12
R [
X [X ["X##Y5'[./Y) [)Y- -[0Y- 1[5[=/Z8 , [8Z<
<[?Z<
[[[[c t t t t 5 } t t
d 5 } | \ }} | t | nC# t j
$ r1 t d |
Y nw xY wx# 1 swxY w Y ddd dS # 1 swxY w Y dS )z
Run listening service
r ) max_workers maxqueuesizeTz(Connection rejected: thread pool is fullN)r r
r r r _MAX_WORKERSacceptsubmitr queueFullrW errorclose)spoolconnr s r rZ rZ s< n%%% ' ' 1 >CB> CCC)rl rm r N)r N);__doc__ collectionsrs loggingr r# r r} rY threadingr r typingr xray.agent.executorr #xray.console_utils.run_user.runnersr r xray.internal.constantsr r
xray.internal.exceptionsr xrayr r xray.internal.user_plugin_utilsr
r r r r xray.internal.utilsr r r clcommon.clwpos_libr getLoggerrW compilerQ r ry defaultdictintrx rw r bytesr rP r& r. dictrk r rZ r< r r r s
* * * * * * * * 5 5 5 5 5 5 B B B B B B B B C C C C C C C C . . . . . . N M M M M M M M M M 6 6 6 6 6 6 < ( (
RZK
L
L
*;*3// .E%, / . . . .O5 OS O O O O?U ?u ? ? ? ?*96T 96 96f 96ue|AT 96 96 96 96xA/ A/ A/ A/H
r